Umm, what? Did we just enforce a global codefreeze in perpetuity? Or, even easier, did we just enforce a global codefreeze for the linux operating system in perpetuity? No? Ok, then how do we end up with a finite number of serious security bugs?
Yes, new bugs could be introduced when software is modified. But any modifications should be safety-tested by frontier LLMs, so the likelyhood of them going into production is low. There will be occasional security bugs slipping by, but no longer a tide like today.